9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire#!/usr/sbin/dtrace -s
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire/*
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * tcptop: display top TCP network packets by process.
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * Written using DTrace tcp Provider.
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire *
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * Usage: dtrace -s tcptop.d [count] [interval]
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire *
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * This analyses TCP network packets and prints the responsible PID plus
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * standard details such as IP address and port. This captures traffic
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * of newly created TCP connections that were established while this program
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * was running along with traffic from existing connections. It can help
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * identify which processes is causing TCP traffic.
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire *
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * CDDL HEADER START
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire *
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * The contents of this file are subject to the terms of the
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * Common Development and Distribution License (the "License").
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * You may not use this file except in compliance with the License.
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire *
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * or http://www.opensolaris.org/os/licensing.
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * See the License for the specific language governing permissions
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * and limitations under the License.
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire *
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * When distributing Covered Code, include this CDDL HEADER in each
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * If applicable, add the following below this CDDL HEADER, with the
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * fields enclosed by brackets "[]" replaced with your own identifying
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * information: Portions Copyright [yyyy] [name of copyright owner]
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire *
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * CDDL HEADER END
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire/*
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * Copyright (c) 2010, Oracle and/or its affiliates. All rights reserved.
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire *
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * Portions Copyright 2010 Brendan Gregg
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire#pragma D option quiet
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire#pragma D option defaultargs
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire#pragma D option switchrate=10hz
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire/*
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * Print header
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguiredtrace:::BEGIN
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire{
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire /* starting values */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire counts = $1 ? $1 : 10;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire secs = $2 ? $2 : 5;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire TCP_out = 0;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire TCP_in = 0;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire printf("Sampling... Please wait.\n");
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire}
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguiretcp:::send
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire/ args[1]->cs_pid != -1 /
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire{
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire @out[args[1]->cs_zoneid, args[1]->cs_pid, args[2]->ip_saddr,
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire args[4]->tcp_sport, args[2]->ip_daddr, args[4]->tcp_dport] =
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire sum(args[2]->ip_plength - args[4]->tcp_offset);
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire}
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguiretcp:::receive
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire/ args[1]->cs_pid != -1 /
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire{
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire @out[args[1]->cs_zoneid, args[1]->cs_pid, args[2]->ip_daddr,
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire args[4]->tcp_dport, args[2]->ip_saddr, args[4]->tcp_sport] =
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire sum(args[2]->ip_plength - args[4]->tcp_offset);
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire}
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire/*
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * TCP Systemwide Stats
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguiremib:::tcpOutDataBytes { TCP_out += args[0]; }
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguiremib:::tcpRetransBytes { TCP_out += args[0]; }
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguiremib:::tcpInDataInorderBytes { TCP_in += args[0]; }
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguiremib:::tcpInDataDupBytes { TCP_in += args[0]; }
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguiremib:::tcpInDataUnorderBytes { TCP_in += args[0]; }
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguireprofile:::tick-1sec
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire/secs != 0/
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire{
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire secs--;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire}
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire/*
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * Print Report
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguireprofile:::tick-1sec
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire/secs == 0/
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire{
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire /* fetch 1 min load average */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire this->load1a = `hp_avenrun[0] / 65536;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire this->load1b = ((`hp_avenrun[0] % 65536) * 100) / 65536;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire /* convert TCP counters to Kb */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire TCP_out /= 1024;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire TCP_in /= 1024;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire /* print status */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire printf("%Y, load: %d.%02d, TCPin: %6d Kb, TCPout: %6d Kb\n\n",
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire walltimestamp, this->load1a, this->load1b, TCP_in, TCP_out);
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire /* print headers */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire printf("%6s %6s %-15s %5s %-15s %5s %9s\n",
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire "ZONE", "PID", "LADDR", "LPORT", "RADDR", "RPORT", "SIZE");
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire /* print data */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire printa("%6d %6d %-15s %5d %-15s %5d %@9d\n", @out);
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire printf("\n");
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire /* clear data */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire trunc(@out);
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire TCP_in = 0;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire TCP_out = 0;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire secs = 5;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire counts--;
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire}
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire/*
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * End of program
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguireprofile:::tick-1sec
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire/counts == 0/
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire{
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire exit(0);
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire}
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire/*
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire * Cleanup for Ctrl-C
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire */
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguiredtrace:::END
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire{
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire trunc(@out);
9cd928fe5e3ea4e05f64cfb380beb54b2623e7dcAlan Maguire}